$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa File: ec11c3d2-17e5-39a3-a234-23d15e9db737.roa (raw, json) Hash identifier: QO5CotC6D8a+mHRCxBle/j+RChBlhz59cbJ3bD+vBNI= Subject key identifier: 70:02:72:9B:59:C9:14:C3:86:9F:82:5E:B7:46:FC:ED:7D:02:38:9D Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584DAF102EDBE4DAD22F64EBA600 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 22223 IP address blocks: 184.94.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2e:db:e4:da:d2:2f:64:eb:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=8c4671de-6f7d-430f-8e31-f267bff41b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:d0:9c:00:d0:1b:4a:41:05:dd:e7:a4:1a: 5b:80:d2:56:ad:4c:ef:62:d6:2f:f4:4d:3c:b5:0a: 78:83:f4:d8:1e:87:2e:ce:c7:19:9b:25:3f:95:16: 24:4f:17:cf:f6:3f:78:90:dc:d4:73:4c:ce:cc:aa: bf:ec:b5:6c:60:c3:00:e3:fd:bb:76:b7:25:30:1e: ba:33:e2:60:f2:74:99:1a:1d:c2:57:08:a3:1b:c9: 75:67:12:21:fc:30:e0:dd:05:d9:7f:41:f7:d8:32: b5:48:e1:cf:dd:bf:a3:fd:5c:24:ba:dc:38:16:ba: c8:18:87:03:88:c1:1e:b1:89:b4:6c:25:c4:34:c5: d1:29:08:ba:39:86:fc:60:4e:03:60:e8:bc:26:40: 06:b8:06:88:7b:36:88:ca:52:10:18:22:06:27:a8: 83:19:09:b1:fa:13:f5:42:94:67:4d:f2:0b:3f:8b: ff:6f:be:fc:78:63:92:57:63:5d:25:a5:63:81:67: f6:7e:d4:ba:2f:4c:36:dd:aa:26:da:9f:27:7d:a9: 88:63:12:7e:d7:b6:a5:b5:52:53:6a:e8:8b:40:96: 82:a4:43:90:f4:75:b2:8b:be:2c:bb:c6:6a:e2:93: 45:de:b6:44:99:eb:e0:c6:eb:0d:67:1e:33:31:70: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:02:72:9B:59:C9:14:C3:86:9F:82:5E:B7:46:FC:ED:7D:02:38:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 184.94.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:49:79:63:23:72:a6:45:ab:12:57:da:e9:ab:77:f5:f7:5d: f7:5c:94:31:8a:17:c6:d3:06:ee:b7:21:c2:11:6a:b9:70:4b: d5:f1:52:fa:50:6e:f2:c9:63:29:df:60:b6:88:9d:a4:47:b2: 84:02:3b:4c:fa:01:9e:23:a4:29:a7:c6:16:ec:41:4f:8b:aa: 5a:d4:57:49:f0:71:11:9b:3a:50:e1:ac:ba:7e:89:af:86:64: bd:d1:7c:3c:2f:c0:60:ae:16:39:83:79:65:eb:e7:7e:69:0d: ce:6b:98:c9:af:72:30:1d:7e:14:bc:49:62:c9:28:ec:ae:15: 29:e9:02:78:8a:f7:4e:cc:08:7b:dd:d0:b7:39:9d:43:54:61: b9:55:27:94:04:15:9c:b1:be:d3:c9:58:8f:ab:24:bd:e3:93: f6:b3:e2:32:30:ed:78:40:61:46:34:41:6a:7c:61:63:dc:bc: 75:65:07:e6:c5:8b:8f:b1:e4:23:de:c8:c4:5c:8a:09:a8:50: a9:30:ce:89:1f:0b:bb:bd:91:8d:82:9c:59:1b:08:78:25:81: 05:7a:9d:d6:3c:df:d8:de:44:c1:bd:35:74:10:f8:c9:d7:e7: 3b:b5:3f:e5:76:f3:1d:63:c6:8d:38:3e:83:f2:dc:f2:55:5d: 32:91:d1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEC7b5NrSL2TrpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk OGM0NjcxZGUtNmY3ZC00MzBmLThlMzEtZjI2N2JmZjQxYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPLQnADQG0pBBd3npBpbgNJWrUzvYtYv9E08 tQp4g/TYHocuzscZmyU/lRYkTxfP9j94kNzUc0zOzKq/7LVsYMMA4/27drclMB66 M+Jg8nSZGh3CVwijG8l1ZxIh/DDg3QXZf0H32DK1SOHP3b+j/Vwkutw4FrrIGIcD iMEesYm0bCXENMXRKQi6OYb8YE4DYOi8JkAGuAaIezaIylIQGCIGJ6iDGQmx+hP1 QpRnTfILP4v/b778eGOSV2NdJaVjgWf2ftS6L0w23aom2p8nfamIYxJ+17altVJT auiLQJaCpEOQ9HWyi74su8Zq4pNF3rZEmevgxusNZx4zMXAREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHACcptZyRTDhp+CXrdG/O19AjidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvZWMxMWMzZDItMTdlNS0z OWEzLWEyMzQtMjNkMTVlOWRiNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuF6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlJeWMjcqZFqxJX2umrd/X3XfdclDGKF8bTBu63IcIRarlwS9XxUvpQ bvLJYynfYLaInaRHsoQCO0z6AZ4jpCmnxhbsQU+LqlrUV0nwcRGbOlDhrLp+ia+G ZL3RfDwvwGCuFjmDeWXr535pDc5rmMmvcjAdfhS8SWLJKOyuFSnpAniK907MCHvd 0Lc5nUNUYblVJ5QEFZyxvtPJWI+rJL3jk/az4jIw7XhAYUY0QWp8YWPcvHVlB+bF i4+x5CPeyMRcigmoUKkwzokfC7u9kY2CnFkbCHglgQV6ndY839jeRMG9NXQQ+MnX 5zu1P+V28x1jxo04PoPy3PJVXTKR0Qs= -----END CERTIFICATE-----Generated at Wed May 13 03:37:44 2026 by rpki-client